Posts tagged culture

Collapsology: Why Exposed RDP Isn’t Your Biggest Threat

In September 2021, I presented a conference talk entitled “Collapsology: Why Exposed RDP Isn’t Your Biggest Threat” where I gave an overview of how to identify cultural threats in a rapidly evolving business landscape, and how we can use modern-day tools to identify these threats before they result in security culture collapse.

Read more ...


Why We Should Remove Lazy From Our Vocabulary

Lazy is a word I see much too frequently. Sometimes it comes up as the key reason a web application is insecure or because an internal network is missing a backlog of patches. Sometimes it’s used to explain peoples attitudes towards security in general or their lack of acceptance of a particularly scathing report.

Read more ...